71.228.159.206
Neutral Activity
There is no recent abuse activity, or the IP address is whitelisted.
- ISP
- Comcast Cable Communications, Inc.
- Usage Type
- Fixed Line ISP
- ASN
- AS33653
- Hostname(s)
- c-71-228-159-206.hsd1.az.comcast.net
- Domain Name
- comcast.net
- Country
- 🇺🇸 United States of America
- City
- Drexel Heights, Arizona
No reports in the last 60 days
71.228.159.206 has been reported 82 times. The most recent report is from .
The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.
Abuse Reports
Total reports
82 from
47 distinct
reporters
First reported
Most recent report
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| 🇰🇷 winter |
Connection attemp from 71.228.159.206 to port 22
|
Brute-Force SSH | |
| 🇺🇸 jbettigole |
MikroTik RouterOS: repeated connection attempts against non-public admin/service ports (SSH/Telnet/FTP/Winbox/API/WWW) triggering escalating 5m/15m/1h/1d blacklist
|
Brute-Force Hacking | |
| 🇧🇷 noconex |
Wazuh Alert | Rule ID: 100199 | Desc: Suricata: (ET SCAN Potential SSH Scan) detectado de 71.228.159.206
|
Port Scan Brute-Force SSH | |
| 🇷🇸 Scan |
MultiHost/MultiPort Probe, Scan, Hack -
|
Port Scan Hacking | |
| 🇷🇸 Smel |
SSH/22 MH Probe, BF, Hack -
|
Hacking Brute-Force SSH | |
| Anonymous |
SSH brute-force: 5 blocked connection attempts to port 22 between 2026-09-04 02:56 and 2026-09-04 02:57 UTC (OPNsense firewall log).
|
Brute-Force SSH | |
| 🇹🇭 Sawasdee |
SSH break in attempt
...
|
SSH | |
| Anonymous |
Trying ports that it shouldn't be.
|
Port Scan Hacking Exploited Host | |
| 🇫🇮 jonahtebaa |
SSH tarpit (endlessh) capture on jonahtebaa infra
|
Port Scan Brute-Force SSH | |
| 🇷🇸 Scan |
MultiHost/MultiPort Probe, Scan, Hack -
|
Port Scan Hacking | |
| 🇩🇪 zupan |
Blocked by UFW on vps [23/tcp] | SPT: 59787 | TTL: 50 | LEN: 60 | TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter
|
Port Scan IoT Targeted | |
| Anonymous |
Triggered: repeated knocking on closed ports.
|
Port Scan | |
| 🇺🇸 MPL |
tcp ports: 22,23 (12 or more attempts)
|
Port Scan | |
| 🇵🇱 mkey |
Verified scan activity detected by local IDS/firewall correlation. SCAN: HIGHRISK_MULTIPORT | PORTS=22,23 | HITS=2 | IPSET=ADD | FIRST=2026-09-02 04:37:30 | LAST=2026-09-02 04:37:30. Last seen 2026-09-02 04:37:30.
|
Port Scan | |
| 🇺🇸 ras07 |
Brute force SSH login attempts.
|
Brute-Force SSH |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown